Valid PCNSC Exam Q&A PDF PCNSC Dump is Ready (Updated 74 Questions)
Exam Questions and Answers for PCNSC Study Guide
NEW QUESTION 38
Which two benefits come from assigning a Decrypting Profile to a Decryption rule with a" NO Decrypt" action? (Choose two.)
- A. Block sessions with expired certificates
- B. Block sessions with untrusted issuers
- C. Block sessions with client authentication
- D. Block sessions with unsuspected cipher suites
- E. Block credential phishing.
Answer: A,B
NEW QUESTION 39
Which administrative authentication method supports authorization by an external service?
- A. SSH keys
- B. Certification
- C. LDAP
- D. RADIUS
Answer: A
NEW QUESTION 40
An administrator pushes a new configuration from panorama to a pair of firewalls that are configured as active/passive HA pair.
Which NGFW receives the configuration from panorama?
- A. the active firewall, which then synchronizes to the passive firewall
- B. both the active and passive firewalls independently, with no synchronization afterward
- C. both the active and passive firewalls, which then synchronizes with each other
- D. the passive firewall, which then synchronizes to the active firewall
Answer: C
NEW QUESTION 41
Which two subscriptions are available when configuring panorama to push dynamic updates to connected devices? (Choose two.)
- A. Content-ID
- B. User-ID
- C. Application and Threats
- D. Antivirus
Answer: C,D
NEW QUESTION 42
Winch three steps will reduce the CPU utilization on the management plane? (Choose three. ) Disable logging at session start in Security policies.
- A. Disable SNMP on the management interface.
- B. Disable predefined reports.
- C. Application override of SSL application.
- D. Reduce the traffic being decrypted by the firewall.
Answer: A,B,D
NEW QUESTION 43
How would an administrator monitor/capture traffic on the management interface of the Palo Alto Networks NGFW?
- A. Enable all four stage of traffic capture (TX, RX, DROP, Firewall)
- B. Use the tcpdump command
- C. USe the debug dataplane packet-dia set capture stage firewall file command
- D. Use the debug dataplane packet-diag set capture stage management file command
Answer: B
NEW QUESTION 44
The firewall identified a popular application as a unknown-tcp. Which options are available to identify the application? (Choose two.)
- A. Create a customer object for the customer application server to identify the custom application.
- B. Create a custom application.
- C. Submit an App-ID request to Palo Alto Networks.
- D. Create a Security policy to identify the customer application.
Answer: A,B
NEW QUESTION 45
A speed/duplex negotiation mismatch is between the Palo Alto Networks management port and the switch it connect.
How would an administrator configure the interface to IGbps?
- A. set deviceconfig interface speed-duplex 1Gbs--full-duplex
- B. set deviceconfig interface speed-duplex 1Gbs--half-duplex
- C. set deviceconfig system speed-duplex 10Gbps-full-duplex
- D. set deviceconfig system speed-duplex 1Gbs--half-duplex.
Answer: D
NEW QUESTION 46
A Palo Alto Networks NGFW just submitted a file lo WildFire tor analysis Assume a 5-minute window for analysis. The firewall is configured to check for verdicts every 5 minutes.
How quickly will the firewall receive back a verdict?
- A. 5 to 10 minutes
- B. 10 to 15 minutes
- C. 5 minutes
- D. More than 15 minutes
Answer: A
NEW QUESTION 47
Which two action would be part of an automatic solution that would block sites with untrusted certificates without enabling SSL forward proxy? (Choose two.)
- A. Create a Security Policy rule with vulnerability Security Profile attached.
- B. Create a no-decrypt Decryption Policy rule.
- C. Enable the "Block seasons with untrusted Issuers- setting.
- D. Configure an EDL to pull IP Addresses of known sites resolved from a CRL.
- E. Configure a Dynamic Address Group for untrusted sites.
Answer: A,C
NEW QUESTION 48
Which processing order will be enabled when a panorama administrator selects the setting "Objects defined in ancestors will takes higher precedence?
- A. Descendant object will take precedence over other descendant objects.
- B. Ancestor objects will have precedence over other ancestor objects.
- C. Ancestor will have precedence over descendant objects.
- D. Descendant objects, will take precedence over ancestor objects.
Answer: C
NEW QUESTION 49
Refer to the exhibit.
A web server in the DMZ is being mapped to a public address through DNAT.
Which Security policy rule will allow traffic to flow to the web server?
- A. Untrust (any) to DMZ (10. 1. 1. 100), web browsing - Allow
- B. Untrust (any) to Untrust (10. 1.1. 100), web browsing - Allow
- C. Untrust (any) to Untrust (1. 1. 1. 100), web browsing - Allow
- D. Untrust (any) to DMZ (1. 1. 1. 100), web browsing - Allow
Answer: C
NEW QUESTION 50
Which three authentication faction factors does PAN-OS software support for MFA? (Choose three.)
- A. Voice
- B. Okta Adaptive
- C. Push
- D. SMS
- E. Pull
Answer: A,C,E
NEW QUESTION 51
Which version of Global Protect supports split tunneling based on destination domain, client process, and HTTP/HTTPs video streaming application?
- A. Glovbalprotect version 4.1 with PAn-OS 8.1
- B. Glovbalprotect version 4.0 with PAn-OS 8.1
- C. Glovbalprotect version 4.1 with PAn-OS 8.0
- D. Glovbalprotect version 4.0 with PAn-OS 8.0
Answer: B
NEW QUESTION 52
An administrator has enabled OSPF on a virtual router on the NGFW OSPF is not adding new routes to the virtual router.
Which two options enable the administrator top troubleshoot this issue? (Choose two.)
- A. View Runtime Status virtual router.
- B. View System logs.
- C. Add a redistribution profile to forward as BGP updates.
- D. Perform a traffic pcap at the routing stage.
Answer: A,B
NEW QUESTION 53
Which PAN-OS policy must you configure to force a user to provide additional credential before he is allowed to access an internal application that contains highly sensitive business data?
- A. Decryption policy
- B. Authentication policy
- C. Application Override policy
- D. Security policy
Answer: B
NEW QUESTION 54
In High Availability, which information is transferred via the HA data link?
- A. session information
- B. User-ID information
- C. heartbeats
- D. HA state information
Answer: A
NEW QUESTION 55
......
Certification dumps - Paloalto Certifications and Accreditations PCNSC guides - 100% valid: https://www.dumpsking.com/PCNSC-testking-dumps.html
